- From: Andi Sidwell <andi@takkaria.org>
- Date: Sun, 31 May 2009 22:39:31 +0100
- To: public-html@w3.org
Larry Masinter wrote: > Not sure I understand -- does web mail have to turn off scripting? > > Is the only HTML that is suitable for transmission by email to > a web mail user one that doesn't rely on scripting? > > How can I email HTML which uses <canvas>, if scripting is turned > off for web mail users? I would suggest the only safe thing for webmail to do would be to parse the HTML document in question and whitelist elements that are known to be safe. As a result, <canvas> would (hopefully) not work. Andi
Received on Sunday, 31 May 2009 21:39:14 UTC